Changeset 243149 in webkit
- Timestamp:
- Mar 19, 2019 10:49:21 AM (5 years ago)
- Location:
- trunk/Source/WebKit
- Files:
-
- 2 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/Source/WebKit/ChangeLog
r243147 r243149 1 2019-03-19 Per Arne Vollan <pvollan@apple.com> 2 3 [iOS] Remove overridden rules in sandbox 4 https://bugs.webkit.org/show_bug.cgi?id=193840 5 <rdar://problem/47558526> 6 7 Reviewed by Brent Fulgham. 8 9 On iOS, there are some rules overridden in the same sandbox file. The overridden rules 10 should be removed. 11 12 * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb: 13 1 14 2019-03-19 Timothy Hatcher <timothy@apple.com> 2 15 -
trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb
r243034 r243149 37 37 ;;; 38 38 39 ;;; <rdar://problem/29959382> Allow UIKit apps access to com.apple.TextInput.preferences mach service40 (allow mach-lookup41 (global-name "com.apple.TextInput.preferences"))42 43 (allow mach-lookup44 (xpc-service-name "com.apple.siri.context.service"))45 46 39 (allow mach-lookup 47 40 (global-name "com.apple.frontboard.systemappservices") ; -[UIViewServiceInterface _createProcessAssertion] -> SBSProcessIDForDisplayIdentifier() … … 60 53 (url-translation) 61 54 62 ;; For <rdar://problem/20812377> All applications need to be able to access the com.apple.UIKit.KeyboardManagement running in backboardd63 ;; renamed in <rdar://problem/20909914> Rename com.apple.UIKit.KeyboardManagement64 (allow mach-lookup65 (global-name "com.apple.UIKit.KeyboardManagement")66 (global-name "com.apple.UIKit.KeyboardManagement.hosted"))67 68 55 ;; TextInput framework 69 56 (allow mach-lookup 70 (global-name "com.apple.TextInput") 71 (global-name "com.apple.TextInput.emoji") 72 (global-name "com.apple.TextInput.image-cache-server") 73 (global-name "com.apple.TextInput.lexicon-server") 74 (global-name "com.apple.TextInput.rdt") 75 (global-name "com.apple.TextInput.shortcuts")) 57 (global-name "com.apple.TextInput")) 58 76 59 (mobile-preferences-read "com.apple.da") 77 78 ;; Various Accessibility services.79 (allow mach-lookup80 (xpc-service-name "com.apple.accessibility.AccessibilityUIServer")) ; Needed for Zoom focus updates81 82 ;; ZoomTouch83 ;; <rdar://problem/11823957>84 (allow mach-lookup85 (global-name "com.apple.accessibility.AXBackBoardServer"))86 60 87 61 ;; Speak Selection & VoiceOver … … 94 68 95 69 (allow mach-lookup 96 (global-name "com.apple.audio.AudioComponentPrefs") 97 (global-name "com.apple.audio.AudioComponentRegistrar") 98 (global-name "com.apple.audio.AudioQueueServer")) 70 (global-name "com.apple.audio.AudioComponentRegistrar")) 99 71 100 72 (allow mach-register … … 107 79 (home-subpath "/Library/Assets/com_apple_MobileAsset_VoiceServicesVocalizerVoice")) 108 80 109 ;; HearingAidSupport110 (allow mach-lookup111 (xpc-service-name "com.apple.accessibility.heard"))112 113 81 ;; MediaAccessibility (captions) 114 82 ;; <rdar://problem/12801477> … … 122 90 (allow mach-lookup 123 91 (global-name "com.apple.nehelper") 124 (global-name "com.apple.nesessionmanager.content-filter") ;; <rdar://problem/48442387> 125 (global-name "com.apple.nesessionmanager")) 92 (global-name "com.apple.nesessionmanager.content-filter")) ;; <rdar://problem/48442387> 126 93 127 94 ;; allow 3rd party applications to access nsurlstoraged's top level domain data cache … … 132 99 (allow file-read* 133 100 (home-subpath "/Library/Caches/com.apple.keyboards")) 134 135 ;; NSExtension helper for supplying information not provided by PlugInKit136 (allow mach-lookup137 (xpc-service-name "com.apple.uifoundation-bundle-helper"))138 101 139 102 ;; <rdar://problem/19525887> … … 171 134 (well-known-system-group-container-subpath "/systemgroup.com.apple.lsd.iconscache")) 172 135 (allow mach-lookup 173 (xpc-service-name "com.apple.lsdiconservice") ;; Remove this line after <rdar://problem/47151295> is fixed.174 136 (xpc-service-name "com.apple.iconservices") 175 137 (global-name "com.apple.iconservices")) … … 178 140 (allow mach-lookup 179 141 (global-name "com.apple.CARenderServer") 180 (global-name "com.apple.KeyboardServices.TextReplacementService")181 (global-name "com.apple.assertiond.applicationstateconnection")182 (global-name "com.apple.assertiond.expiration")183 (global-name "com.apple.assertiond.processinfoservice")184 (global-name "com.apple.audio.SystemSoundServer-iOS")185 (global-name "com.apple.backboard.TouchDeliveryPolicyServer")186 (global-name "com.apple.backboard.animation-fence-arbiter")187 (global-name "com.apple.backboard.display.services")188 (global-name "com.apple.backboard.hid.focus")189 (global-name "com.apple.backboard.hid.services")190 142 (global-name "com.apple.iohideventsystem") 191 (global-name "com.apple.frontboard.workspace")192 143 (global-name "com.apple.frontboard.systemappservices")) 193 144 … … 295 246 (with no-log)) 296 247 297 ;; <rdar://problem/34092690>298 (allow mach-lookup299 (xpc-service-name "com.apple.avkit.SharedPreferences"))300 301 248 ;; <rdar://problem/34986314> 302 249 (mobile-preferences-read "com.apple.indigo") 303 304 ;; <rdar://problem/35417382>, <rdar://problem/35518557>305 (allow mach-lookup306 (global-name "com.apple.corespotlightservice"))307 308 ;; <rdar://problem/35446577>309 (allow mach-lookup310 (global-name "com.apple.coremedia.endpointplaybacksession.xpc"))311 312 ;; <rdar://problem/35509194>313 (allow mach-lookup314 (global-name "com.apple.coremedia.endpointremotecontrolsession.xpc"))315 250 316 251 ;;; … … 399 334 (allow mach-lookup 400 335 (global-name "com.apple.PowerManagement.control") 401 (global-name "com.apple.accountsd.accountmanager") 402 (global-name "com.apple.analyticsd") 403 (global-name "com.apple.coremedia.audiodeviceclock")) 336 (global-name "com.apple.analyticsd")) 404 337 405 338 (deny file-write-create (vnode-type SYMLINK)) … … 442 375 ;; Support incoming video connections 443 376 (allow mach-lookup 444 (global-name "com.apple.audio.audiohald")445 377 (global-name "com.apple.coremedia.compressionsession") 446 378 (global-name "com.apple.coremedia.decompressionsession") … … 463 395 (global-name "com.apple.FileProvider") 464 396 (global-name "com.apple.Honeybee.event-notify") 465 (global-name "com.apple.KeyboardServices.TextReplacementService")466 397 (global-name "com.apple.MediaPlayer.RemotePlayerService") 467 398 (global-name "com.apple.ReportCrash.SimulateCrash") 468 (global-name "com.apple.TextInput.emoji")469 (global-name "com.apple.TextInput.image-cache-server")470 (global-name "com.apple.TextInput.lexicon-server")471 (global-name "com.apple.TextInput.preferences")472 (global-name "com.apple.TextInput.rdt")473 (global-name "com.apple.TextInput.shortcuts")474 (global-name "com.apple.UIKit.KeyboardManagement")475 (global-name "com.apple.UIKit.KeyboardManagement.hosted")476 (global-name "com.apple.accessibility.AXBackBoardServer")477 (global-name "com.apple.accessibility.AccessibilityUIServer")478 (global-name "com.apple.accessibility.heard")479 399 (global-name "com.apple.accountsd.accountmanager") 480 (global-name "com.apple.app-sandbox.mach")481 400 (global-name "com.apple.appsupport.cplogd") 482 (global-name "com.apple.assertiond.applicationstateconnection")483 (global-name "com.apple.assertiond.expiration")484 401 (global-name "com.apple.assertiond.processassertionconnection") 485 (global-name "com.apple.assertiond.processinfoservice")486 (global-name "com.apple.audio.AudioComponentPrefs")487 (global-name "com.apple.audio.AudioQueueServer")488 (global-name "com.apple.audio.SystemSoundServer-iOS")489 (global-name "com.apple.audio.audiohald")490 402 (global-name "com.apple.audio.reporting.xpc") 491 (global-name "com.apple.avkit.SharedPreferences")492 (global-name "com.apple.backboard.TouchDeliveryPolicyServer")493 (global-name "com.apple.backboard.animation-fence-arbiter")494 (global-name "com.apple.backboard.display.services")495 (global-name "com.apple.backboard.hid.focus")496 403 (global-name "com.apple.bird") 497 404 (global-name "com.apple.bird.token") … … 501 408 (global-name "com.apple.coremedia.audiodeviceclock") 502 409 (global-name "com.apple.coremedia.audioprocessingtap.xpc") 503 (global-name "com.apple.coremedia.endpointplaybacksession.xpc")504 410 (global-name "com.apple.coremedia.endpointremotecontrolsession.xpc") 505 411 (global-name "com.apple.coremedia.sandboxserver") … … 507 413 (global-name "com.apple.coremedia.visualcontext.xpc") 508 414 (global-name "com.apple.coreservices.lsuseractivitymanager.xpc") 509 (global-name "com.apple.corespotlightservice")510 415 (global-name "com.apple.ctkd.token-client") 511 416 (global-name "com.apple.cvmsServ") 512 417 (global-name "com.apple.duetknowledged.activity") 513 418 (global-name "com.apple.dyld.closured") 514 (global-name "com.apple.frontboard.workspace")515 419 (global-name "com.apple.gpumemd.source") 516 420 (global-name "com.apple.hangtracerd") … … 535 439 (global-name "com.apple.quicklook.ThumbnailsAgent") 536 440 (global-name "com.apple.revisiond") 537 (global-name "com.apple.siri.context.service")538 441 (global-name "com.apple.springboard.backgroundappservices") 539 442 (global-name "com.apple.system.libinfo.muser") 540 (global-name "com.apple.uifoundation-bundle-helper")541 443 (global-name "com.apple.webkit.camera") 542 444 )
Note: See TracChangeset
for help on using the changeset viewer.